Your work.
Your choice.
This notice describes how Comeback, operated by Joshua Anthony Gallant · sole trader · ABN 23 158 652 684, handles information. Last updated 13 November 2026.
Coming-soon interest requests
The launch-interest form is for adults aged 18 or over. A parent or guardian can use their own email to express interest for a younger learner. We collect the email you enter, your explicit permission for a Comeback launch update, the time and version of that permission, a fixed form source and an expiry date. This is separate from a study account or purchase. We do not request study material, send it to AI, or subscribe you to an ongoing newsletter through this form.
Interest requests are stored privately in Cloudflare D1 as pending and unverified. No confirmation or marketing email is currently sent, and a request is not proof of mailbox ownership. Pending email records expire after 180 days and are removed by daily cleanup; provider backups can follow different retention schedules. Before sending any future update, we must check the recorded permission, address-verification and sending arrangements. A launch date and an invitation are not guaranteed.
A private withdrawal receipt is saved on the submitting browser when storage is available. Use “Withdraw my interest” on the coming-soon page to submit that receipt without signing in. Keep it private; it is not placed in a URL. If you lose the receipt, use another browser or want help, email support@mystudycomeback.com from the address concerned; we verify ownership before acting. A matching withdrawal removes the pending email and receipt record. We retain a keyed email hash to prevent unverified public submissions from adding a withdrawn address again; it is not a mailing address and is not used to send messages. Rejoining after withdrawal requires an ownership-verified request. Short-lived keyed hashes of an email or network address help limit abuse; raw network addresses are not stored in the interest database. Interest addresses are not publicly listed, sold or automatically transferred to a marketing audience.
What stays in your browser
Your drafts, imported teaching text, saved questions and practice results are kept in this browser until you choose another action. Text-based PDFs are extracted locally. Files are limited to eight library documents, 20,000 extracted characters each. Raw PDF files and raw photos are not included in cloud study copies. Browser storage may be cleared or unavailable; export important work and clear local data on shared devices.
Accounts & cloud copies
The available methods appear on our sign-in page. When enabled, they can include Google, a code sent to an email inbox you choose, or Apple. For Google or Apple sign-in, the selected provider supplies your verified email and provider account identifier, with a name when available. If you choose Apple’s Hide My Email option, your account can use Apple’s relay address. We store an account identifier, name, email, account records and a secure session. We do not keep Google or Apple OAuth access, refresh or ID tokens in your account records, and Comeback does not collect a study-account password.
Email sign-in sends a code through Cloudflare Email Service to the address you supply. Codes are stored in hashed form, are single-use and have a five-minute validity period. Verification and rate-limit records help operate sign-in and prevent abuse. A necessary, secure cookie keeps you signed in for up to seven days. When you select Save cloud copy, your text drafts, extracted library text, questions and practice history are stored privately in Cloudflare D1, limited to 750 KB. Saving is explicit; importing a file alone does not save it to the cloud.
When you request AI
Creating practice sends the selected teaching excerpts, your optional course scope and feedback to OpenAI. Requesting work feedback sends the question, your attempt, rubric and supplied context. Photo transcription sends the compressed page image only after you request it; you can edit and confirm the result before using it. Remove student numbers, names of other people, health information and other unnecessary personal details first. Only upload material you have permission to use.
We request that API responses are not stored as reusable OpenAI response objects. This does not guarantee zero provider retention. OpenAI may retain abuse-monitoring data under its policies, normally for up to 30 days, with exceptions. See OpenAI’s data controls. We do not use your materials to train a Comeback model or sell them to advertisers.
Payments, security & service records
Stripe processes card and billing information on its hosted checkout. Comeback stores the customer, transaction and subscription identifiers, purchase status, entitlements and usage counters needed to operate your account. We do not receive your full card number. Cloudflare hosts the website, database, email and security infrastructure. Support correspondence, including your email address and the message you send, may be handled through Google’s Gmail or Google Groups services. Depending on the features you use, Google, Apple when you choose Apple sign-in, Stripe, Cloudflare and OpenAI may process data outside Australia, including in the United States and other countries where they operate. The app does not promise Australian-only storage. We currently use no advertising pixels or optional analytics cookies.
Access, correction & deletion
You can download or delete your cloud study copy in My account. Deleting that copy removes its study text; limited identifier/version metadata remains to prevent conflicting saves. It does not cancel a subscription, remove local browser data or erase provider records. For account deletion, a correction, privacy complaint or other request, contact support from your account email. We verify ownership, cancel future billing as requested and remove account/study records that are no longer needed. Payment, tax, security and legal records may need to be retained. Provider backups and retention schedules can delay complete deletion.
Support email is being activated. Paid purchases remain unavailable until a working support contact is published.
Young learners
Do not create an account if you are under 13. If you are under 18, involve a parent or guardian in purchases and follow your school’s rules. Avoid putting identifying information about classmates into uploads. Parents or guardians can contact support about their child’s privacy; we verify the request before sharing or removing information.